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DETAILED ACTION 

This Request for Continued Examination has been accepted and entered. 

Response to Arguments 

Applicant's arguments filed 9/15/2008 have been fully considered but they are not 
persuasive. 

The applicant argues that Aucsmith uses parts of the key, unlike the present invention. 
The applicant cites application page 16 lines 24-30 to illustrate that the current invention 
is not exposing or accessing any part of the cryptographic key. 

The applicants argument rests on differentiating "property of a key" from "part of key". 
The applicant argues the terms are not equivalent. The examiner asserts that even if the 
applicant is using a "property" of the key, (positive or negative, odd or even) the 
applicant is still using a "part" of that key. The examiner does not believe it is a stretch 
that a "property" of a key be considered a "part" of a key. The property/part does not 
require or expose the original key. However the property/part, of the original key is still 
being exposed and accessed. 

Aucsmith does not expose an original key. If the properties of the claimed invention are 
parts of a key, and the Examiner asserts that they are, then Aucsmith and the claimed 
invention provide the same amount of access and exposure. 
The examiner encourages the applicant to contact him for an additional interview . 



Application/Control Number: 09/604,174 
Art Unit: 2134 



Page 3 



Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

Claims 1, 2, 8, 10, 12, and 21 are rejected under 35 U.S.C. 102(b) as being anticipated 
by Aucsmith US 5,892,899. 

As per claim 1 , Aucsmith teaches identifying a set of actions that are performed in the 
course of using a cryptographic algorithm to apply a cryptographic key to said first data 
(a security sensitive program that uses a secret "S" to implement a cryptographic 
function) (Col 4 lines 1-15). Aucsmith teaches generating a first set of computer- 
executable instructions which includes instructions to perform said actions (generates 
partitioned subparts) (Col 3 lines 48-57). Aucsmith teaches including said first set of 
computer-executable instructions in said computer program, wherein said computer 
program does not require access said cryptographic key (subprogram generator for 
generating subprograms to implement a security sensitive program that does not require 
access to a secret, secret data is partitioned, thus eliminating secret data) (Col 4 lines 3-5). 
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As per claim 2, Aucsmith teaches said cryptographic algorithm is a public/private-key 
algorithm (asymmetric key scheme) (Col 4 lines 10-16). 

As per claims 8, 10 Aucsmith teaches generating a diversionary second set of computer- 
executable instructions which perform one or more second actions; and 
including said second set of computer-executable instructions in said computer program 
(tasks to further obscure the true nature of the program, these tasks have no purpose) (Col 
4 lines 15-20). 

As per claim 12 Aucsmith teaches reorganizing at least some code contained in the 
program (obfuscated by dividing and processing into a number of obfuscated 
subprograms) (Col 5 lines 18-22). 

As per claim 21 Aucsmith teaches a set of instructions to perform claim 1 (subprogram 
generator) (Col 4 lines 20-25). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 3 and 7, 14-16 is rejected under 35 U.S.C. 103(a) as being unpatentable over 



Aucsmith US 5,892,899 in view of Granger US 6,643,775. 
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As per claim 3 Aucsmith teaches secret and a asymmetric algorithm, but does not teach 
that the secret is a private key of an asymmetric key pair. 

Granger teaches that the secret is a private key of an asymmetric key pair (key in an 

asymmetric algorithm) (Col 10 lines 28-38). 
It would have been obvious to one of ordinary skill in the art to use the asymmetric key of 
Granger as the secret in Aucsmith because it is beneficial to hide keys from software pirates. 
As per claim 7 Aucsmith fails to teach pseudo-randomly generating a number, wherein said 
first set of computer-executable instructions is based on said number. 
Granger teaches pseudo-randomly generating a number, wherein said first set of computer- 
executable instructions is based on said number (during encryption multiplies by random 
number R) (Col 12 line 55). 

As per claim 14, Aucsmith fails to teach encrypting a portion of instructions. 

Granger teaches encrypting at least a portion of said first set of computer-executable 
instructions; and creating a second set of computer-executable instructions which decrypts 
said portion (encrypts data table, decrypts line by line when needed) (Col 7 lines 8-20). 

As per claim 15, Aucsmith does not specify source level code. 

Granger teaches the program is written in source and compiled, (high level language, then 
compiled) (Col 7 lines 53-59). 
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As per claim 16, Aucsmith does not teach postprocessing. 

Granger teaches the act of postprocessing the compiled instructions after said compiling act, 
wherein said postprocessing act comprises one or more of the following: encrypting at least a 
portion of the compiled instructions, and hashing at least a portion of the compiled 
instructions (encrypting after compiling) (Col 15 lines 18-21). 



Claim 4-6, 17, 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Aucsmith US 5,892,899 in view of Maytal US 6,715,079. 

As per claims 4, 5, and 6 Aucsmith teaches a secret as second data but fails to teach the 
secret in some way identifies or relates to a computing device on which said computer 
program runs, and wherein said first set of computer-executable instructions is based on 
said second data. 

Maytal teaches using a second data that identifies a computing device on which said 
computer program runs and wherein said first set of computer executable instructions is 
based on said second data (uses the CPUID as the secret/second data that is incorporated 
into computer executable instructions) (Col 10 lines 25-35). It is well known that proper 
execution depends on retrieval of second data (proper encryption/decryption needs 
correct operations based on incorporated data). 
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It would have been obvious to one of ordinary skill in the art to use the CPUID of Maytal 
with the program of Aucsmith because it will prevent illegal copying and use without the 
appropriate hardware. 



As per claims 17 and 18, Aucsmith does not teach receiving, from a computing device, a 
request for said computer program via a network; and 

providing said computer program to said computer device via said network where the 
network is the internet. 

Maytal teaches receiving, from a computing device, a request for said computer program 
via a network; and providing said computer program to said computer device via said 
network where the network is the internet.( CPU's submitting data to request a 
customized computer program may be downloaded to the computer over the Internet) 
(Col 10 lines 25-35). 



Claims 9,and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Aucsmith US 5,892,899 in view of Matsui US 2002/0178412. 

As per claims 9, and 20 Aucsmith teaches diversionary code (Col 4 lines 15-20). Aucsmith 
does not teach retrieving instructions from a database. 

Matsui teaches retrieving instructions from a database (retrieving program from external 
database and compiling it) [047]. 
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It would have been obvious to one obvious to one of ordinary skill in the art to modify 
Aucsmith with the database of Matsui because it can be retrievable at any terminal with 
network access. 

Claim 11, is rejected under 35 U.S.C. 103(a) as being unpatentable over Aucsmith US 
5,892,899 in view of Barton US 5,912,972 

As per claim 1 1 , Aucsmith fails to teach a second set of computer-executable instructions 
which detects modification or deletion of at least a portion of code contained in said 
computer program, and which restores said portion if said portion has been deleted or 
modified. 

Barton teaches error detection and correction, (Col 9 lines 9-16). 

It would have been obvious to one of ordinary skill in the art to add the error correction to n 
the system of Aucsmith because the error correction would maintain the data and prevent 
errors. 

Claim 13 is rejected under 35 U.S.C. 103(a) as being unpatentable over Aucsmith US 
5,892,899 in view of Mirov 6,138,236. 

As per claim 13 Aucsmith teaches generating instructions in a computer program. Aucsmith 
does not teach delimiting or hashing. 
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Mirov teaches delimiting a segment of at least some code contained in a program (micro 
code) (Fig 1). Mirov teaches obtaining a first hash of the code (verification hash) Mirov 
teaches obtaining a second hash (data hash) and comparing the first hash with the second 
hash (comparing data hash with verification hash to determine authenticity)(Fig 4 Col 4 
lines 8-26). 

It would have been obvious to one of ordinary skill in the art to use the authentication of 
Mirov with the program of Aucsmith because it prevents the use of code that may have 
been tampered with. 

Claims 19, is rejected under 35 U.S.C. 103(a) as being unpatentable over Aucsmith US 
5,892,899 in view of Maytal US 6,715,079 in view of Frasier US 5,758,293 

As per claims 19, Aucsmith does not disclose downloading a program over the Internet. 

Maytal teaches CPU's submitting data to request a customized computer program may be 

downloaded to the computer over the Internet, (Col 10 lines 25-35). Maytal does not 

specify the timetable for downloading. 

Frasier teaches that data is downloaded contemporaneously with a request for said data, 
(Col 1 lines 17-23). It would have been obvious to use the contemporaneous download 
of Frasier with Maytal because it allows for the quick transfer of data. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CHRISTOPHER J. BROWN whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571)272-381 1. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Christopher J Brown/ 9/28/08 
Primary Examiner, Art Unit 2134 



